CNET_42145[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

CNET_42145.exe
Size

35KB
MD5

6c328214d8611709b7143c73bba9f993
SHA1

a7dae387183407d07dae1717034b42d1a30c1ee2
SHA256

41c0d51f2da3af29beda3788b3a1dde40de6d1afe58fdc0b9d102b584b696ac6
SHA512

3a7d9e75484014b52bec495d33c8849dcb1a5dda5c5eac9b68dbf6fa5405b2c844b0b972497f5faa1d422f0f422701f21a571d7b17a0271250952567909a1290
SSDEEP

768:RAmIf0xvz92CogXj62oF6rlyQ2TFMduZjq68b:Sm00x79/ogXj6zX6dHRb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CNET_42145.exe

Files

CNET_42145.exe
.exe windows:5 windows x86

775b08a92310c22e64da633eab9ffb8c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcr90

_crt_debugger_hook
_except_handler4_common
__CxxExceptionFilter
__CxxRegisterExceptionObject
__CxxDetectRethrow
_decode_pointer
__CxxUnregisterExceptionObject
_cexit
_amsg_exit
_XcptFilter
__wgetmainargs
?_query_new_mode@@YAHXZ
__set_app_type
_configthreadlocale
__p__commode
__p__fmode
_encoded_null
__FrameUnwindFilter
_onexit
_lock
__dllonexit
_unlock
_encode_pointer
__CxxQueryExceptionSize
__setusermatherr

kernel32

Sleep
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleHandleA
IsDebuggerPresent
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter

msvcm90

?DoDllLanguageSupportValidation@<CrtImplementationDetails>@@YAXXZ
__setusermatherr_m
?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVString@System@@@Z
?ThrowNestedModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVException@System@@0@Z
?DoCallBackInDefaultDomain@<CrtImplementationDetails>@@YAXP6GJPAX@Z0@Z
?RegisterModuleUninitializer@<CrtImplementationDetails>@@YAXP$AAVEventHandler@System@@@Z
?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVString@System@@P$AAVException@3@@Z

mscoree

_CorExeMain

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 486B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

775b08a92310c22e64da633eab9ffb8c

Headers

DLL Characteristics

File Characteristics

Imports

msvcr90

kernel32

msvcm90

mscoree

Sections

.text Size: 7KB - Virtual size: 6KB

.rdata Size: 25KB - Virtual size: 25KB

.data Size: 512B - Virtual size: 2KB

.rsrc Size: 1024B - Virtual size: 688B

.reloc Size: 512B - Virtual size: 486B

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 25KB - Virtual size: 25KB

.data
Size: 512B - Virtual size: 2KB

.rsrc
Size: 1024B - Virtual size: 688B

.reloc
Size: 512B - Virtual size: 486B